sup-beratergruppe.de
HTML metadata
Technology
- Server
- nginx-rc
- Analytics
-
- Fathom
- Cookie consent
-
- Cookiebot
Third-party hosts loaded (2)
- cdn.usefathom.com×1
- consent.cookiebot.com×1
Social
Contact
- Address
- Lortzingstraße 37, 01307, Dresden, DE
Registration
- Updated
- 2021-11-11
- Name servers
-
- ns.udag.de.
- ns.udag.net.
- ns.udag.org.
DNS records live
- NS
-
- ns.udag.de
- ns.udag.net
- ns.udag.org
- MX
-
- 10 fw.schneider-wp.de
- TXT
-
Foxit-domain-verification=4912359823ea4db32769e1fbec3d36dcswisssign-check=7VHT4nM3aSaIhqDc8SBa4Yn6kj8
- Verified for
-
- Apple
- Brevo
- Meta
- Microsoft 365
Email authentication strong
- SPF
-
v=spf1 a mx ip4:178.249.27.148 ip4:207.154.231.135 a:fw.schneider-wp.de include:_smtp.udag.de include:spf.protection.outlook.com include:spf.crsend.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantinepolicy: quarantine - DKIM
-
- mail:
k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed - mail:
Certificate (current)
R12
Expires in 64 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
- weak content type protection
- missing Permissions Policy
Header values
- referrer-policy
same-origin- x-frame-options
SAMEORIGIN, SAMEORIGIN- x-content-type-options
nosniff, nosniff- content-security-policy
default-src 'self'; script-src 'self' 'nonce--kkIynjZ55Tl6nOVgdaN2qp3xSVZwOZNwSjt7l_l5Ne14JD-N-w5Pw' 'strict-dynamic' https: blob: 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com cdn.usefathom.com www.googletagmanager.com imgsct.cookiebot.com *.googleapis.com *.google.com *.gstatic.com translate.google.com maps.googleapis.com maps.gstatic.com region1.google-analytics.com *.google-analytics.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com consentcdn.cookiebot.com www.youtube.com www.youtube-nocookie.com stadtkind360.de openstreetmap.org *.openstreetmap.org seu2.cleverreach.com; style-src-elem 'unsafe-inline' 'self' 'report-sample'; connect-src 'self' blob: cdn.usefathom.com www.googletagmanager.com *.cookiebot.com *.cookiebot.eu *.googleapis.com *.google.com *.gstatic.com translate.google.com maps.googleapis.com region1.google-analytics.com *.google-analytics.com *.youtube.com *.googl- strict-transport-security
max-age=63072000; includeSubDomains, max-age=31536000